Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
File: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer (raw, json)
Hash identifier: M3N5+D5k0kroh3F5WEURBoY7qkd7NSGHhSyiR4f/FfI=
Subject key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1133599227D702D7BCAD15E50236645DBB558A62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
caRepository: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 15:11:02 +0000
Certificate not after: Fri 06 Mar 2026 15:16:02 +0000
Subordinate resources: AS: 267546
IP: 45.70.40.0/22
IP: 45.166.212.0/22
IP: 191.241.88.0/21
IP: 2804:4310::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:33:59:92:27:d7:02:d7:bc:ad:15:e5:02:36:64:5d:bb:55:8a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 15:11:02 2025 GMT
Not After : Mar 6 15:16:02 2026 GMT
Subject: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:80:0a:03:ee:12:35:85:4f:50:86:e4:1e:
3a:29:0f:cb:04:e3:85:3a:b2:fc:45:3f:8e:0d:ba:
a0:bb:f6:0c:e6:54:fd:0a:ee:47:06:c9:67:75:0f:
d7:d8:98:9e:c6:56:a7:b0:90:b2:ea:57:c4:1e:b3:
78:dc:4f:e5:8d:19:d8:e6:2c:c7:36:4c:9d:94:aa:
e5:1a:d3:66:89:f7:a7:4d:68:3d:bb:95:67:00:e8:
60:f0:66:a2:d6:bb:95:a6:6d:53:a8:d9:4a:71:5f:
2f:12:02:de:23:de:d4:f6:27:7a:90:7f:9d:fd:c7:
d3:ca:d9:2b:a4:21:20:1d:2d:f2:e3:47:2d:23:d7:
7e:95:b5:58:e5:44:73:49:de:e6:a6:e3:a9:6f:d8:
34:5f:fc:d6:28:b5:35:1e:65:23:95:55:72:60:22:
e1:cf:8a:37:64:45:bc:44:e1:11:1e:a7:17:b1:f3:
78:bc:40:4c:2a:72:67:0b:e3:c6:a1:89:1b:ea:ea:
70:6c:10:7a:32:40:79:2f:c7:a0:a7:1a:5f:49:00:
8b:7c:49:c4:20:b0:87:7a:5e:7c:d2:09:10:70:93:
31:5e:dd:f1:34:17:b8:77:57:42:ae:7b:4f:8c:64:
06:2b:86:2a:a2:4e:83:1a:c1:c5:c6:fe:ab:53:1b:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.40.0/22
45.166.212.0/22
191.241.88.0/21
IPv6:
2804:4310::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267546
Signature Algorithm: sha256WithRSAEncryption
7c:26:6c:be:a1:6e:3b:c3:37:3e:12:cd:f8:66:62:f9:b6:90:
a1:80:f6:d1:ff:99:32:90:b3:3b:81:83:df:07:b2:25:28:b4:
c2:c6:0c:e3:2c:03:6a:fa:f4:bd:17:96:3e:07:c7:54:21:ec:
af:2b:9d:10:52:1c:91:c7:0c:e8:33:3a:14:3c:2d:43:a6:98:
4f:3f:10:ff:f6:8b:d3:78:7c:cf:92:b5:47:28:f3:61:18:ce:
cc:9f:11:76:83:f9:4b:7c:6f:30:64:d3:e8:64:5d:b6:32:4c:
ae:fb:e4:87:7e:d7:04:8b:70:eb:0a:cf:7b:e2:b6:05:52:bf:
d4:e3:da:56:8f:87:ad:32:d5:36:67:0b:e0:ae:a5:83:1c:74:
e1:70:7d:85:5f:a3:af:8f:36:64:2e:f0:26:34:f5:82:fd:7f:
5f:0c:d8:18:0d:8f:5b:75:f6:99:35:5f:39:61:16:e6:a6:d9:
2a:8c:9f:d2:a0:fc:e9:f1:9c:4b:49:51:e7:92:4b:20:69:3d:
91:7f:2d:b7:a6:1c:0d:7a:3d:ca:4f:26:d9:89:da:71:17:9e:
5a:e5:58:72:da:79:98:06:45:4d:6d:52:b4:b4:3d:97:3c:96:
b7:ef:a6:04:37:c2:f6:6d:0d:8e:67:8d:aa:b5:15:43:00:45:
58:b0:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:58 2025 by rpki-client